CVE-2019-4014
03.04.2019, 14:29
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892.
| Vendor | Product | Version |
|---|---|---|
| ibm | db2 | 9.7.0.0 |
| ibm | db2 | 9.7.0.1 |
| ibm | db2 | 9.7.0.2 |
| ibm | db2 | 9.7.0.3 |
| ibm | db2 | 9.7.0.4 |
| ibm | db2 | 9.7.0.5 |
| ibm | db2 | 9.7.0.6 |
| ibm | db2 | 9.7.0.7 |
| ibm | db2 | 9.7.0.8 |
| ibm | db2 | 9.7.0.9 |
| ibm | db2 | 9.7.0.10 |
| ibm | db2 | 9.7.0.11 |
| ibm | db2 | 10.1.0.0 |
| ibm | db2 | 10.1.0.1 |
| ibm | db2 | 10.1.0.2 |
| ibm | db2 | 10.1.0.3 |
| ibm | db2 | 10.1.0.4 |
| ibm | db2 | 10.1.0.5 |
| ibm | db2 | 10.1.0.6 |
| ibm | db2 | 10.5.0.0 |
| ibm | db2 | 10.5.0.1 |
| ibm | db2 | 10.5.0.2 |
| ibm | db2 | 10.5.0.3 |
| ibm | db2 | 10.5.0.4 |
| ibm | db2 | 10.5.0.5 |
| ibm | db2 | 10.5.0.6 |
| ibm | db2 | 10.5.0.7 |
| ibm | db2 | 10.5.0.8 |
| ibm | db2 | 10.5.0.9 |
| ibm | db2 | 10.5.0.10 |
| ibm | db2 | 11.1.0.0 |
| ibm | db2 | 11.1.1.1 |
| ibm | db2 | 11.1.2.2 |
| ibm | db2 | 11.1.3.3 |
| ibm | db2 | 11.1.4.4 |
𝑥
= Vulnerable software versions